03f5bb9657f3509ade7b7c9d998a11f7f922489aa8de906fa94f70c5487c2901 | Triage

Sharing

General

Target

JaffaCakes118_f9feddb8d9d2e15ef6a9d53e7014a152
Size

13KB
Sample

250111-hl165sskhm
MD5

f9feddb8d9d2e15ef6a9d53e7014a152
SHA1

97bed1b600d6d402db7e53de8a3681e5d5918537
SHA256

03f5bb9657f3509ade7b7c9d998a11f7f922489aa8de906fa94f70c5487c2901
SHA512

71e48c41901fc3156fad55c2f5c8878d455c2d326ab47fafc04e65e4efb720970a05c9a49c8d6db6511292c55619d413a299c068e3874bf3ce59f36a56a2d680
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhbuQK:hDXWipuE+K3/SSHgxcQK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_f9feddb8d9d2e15ef6a9d53e7014a152
- Size
  
  13KB
- MD5
  
  f9feddb8d9d2e15ef6a9d53e7014a152
- SHA1
  
  97bed1b600d6d402db7e53de8a3681e5d5918537
- SHA256
  
  03f5bb9657f3509ade7b7c9d998a11f7f922489aa8de906fa94f70c5487c2901
- SHA512
  
  71e48c41901fc3156fad55c2f5c8878d455c2d326ab47fafc04e65e4efb720970a05c9a49c8d6db6511292c55619d413a299c068e3874bf3ce59f36a56a2d680
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhbuQK:hDXWipuE+K3/SSHgxcQK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2